Compliance & Governance
Operating on a payment system rail means the rules are not optional. Here is the framework we work within and how we hold ourselves to it.
Bharat Connect Operating Guidelines
All transaction, dispute and settlement flows follow the operating circulars issued by NPCI Bharat BillPay Ltd. for Operating Units.
RBI Payment System Framework
Operations are conducted within the framework applicable to Bharat Bill Payment System participants under the Payment and Settlement Systems Act, 2007.
KYC / AML Programme
Risk-based customer and agent due diligence, sanction screening, transaction monitoring and record retention as per PMLA obligations.
Information Security
Encryption in transit and at rest, role-based access control, audit logging, periodic VAPT and an incident response plan.
Data Protection
Personal data handled per our privacy policy and applicable Indian data protection law, with data stored on servers located in India.
Grievance Redressal
A published escalation matrix with defined turnaround times, escalating to the Nodal Officer and then to the network dispute desk.
Controls that apply to every transaction
Security is implemented at the platform layer so that no partner integration can accidentally weaken it. Controls are reviewed periodically and after any material change.
Encryption
TLS in transit and encryption at rest for sensitive data stores.
Access control
Role-based access, least privilege and periodic access reviews.
Audit logging
Immutable transaction and administrative action logs with retention.
Vulnerability testing
Periodic VAPT and remediation tracking to closure.
Segregation
Separated production, staging and sandbox environments.
Incident response
Documented incident response plan with defined notification steps.
Who we onboard, and how we check
Agent Institutions and their agents are onboarded on a risk-based basis. We verify the entity, its beneficial owners and its authorised signatories before any live credential is issued, and we re-verify periodically.
- Entity and beneficial ownership verification
- Authorised signatory KYC and board authorisation
- Screening against applicable sanctions and watch lists
- Agent-level onboarding records maintained by the institution
- Ongoing transaction monitoring with velocity and value rules
- Record retention as required under applicable law
What happens when something goes wrong
Failures happen on any network. What matters is that the money is traceable and the customer has a defined route to a resolution.
- Every transaction carries a Bharat Connect reference number
- Deemed-success and pending states reconciled automatically
- Failed collections returned per network refund rules
- Complaints tracked through the network dispute workflow
- Defined turnaround times at every escalation level
- Escalation to the Nodal Officer if unresolved
Regulatory disclaimer
Bharat Connect (formerly Bharat Bill Payment System / BBPS) is operated by NPCI Bharat BillPay Ltd. under the authorisation of the Reserve Bank of India. References on this website to network roles, participation and operating guidelines are descriptive. PREBAIRD PRIVATE LIMITED does not represent itself as the operator of the network, and all marks referred to belong to their respective owners. Service availability, biller coverage and commercial terms are governed solely by the executed agreement between PREBAIRD PRIVATE LIMITED and the partner.
Need our compliance pack for your vendor onboarding?
We can share entity documents, the security control summary and the escalation matrix for your internal due-diligence process.